Adobe Incopy vulnerabilities

65 CVEs affecting Adobe Incopy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34708, published 2026-06-09.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-30654, published 2022-06-16. High severity, CVSS 7.8. EPSS: 6.4% chance of exploitation in the next 30 days. Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
• CVE-2022-30650, published 2022-06-16. High severity, CVSS 7.8. EPSS: 6.4% chance of exploitation in the next 30 days. Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
• CVE-2021-21090, published 2021-06-28. High severity, CVSS 8.8. EPSS: 5.4% chance of exploitation in the next 30 days. Adobe InCopy version 16.0 (and earlier) is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote…
• CVE-2022-30657, published 2022-06-16. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user.…
• CVE-2022-30655, published 2022-06-16. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user.…
• CVE-2021-21010, published 2021-01-13. High severity, CVSS 7.0. EPSS: 2.6% chance of exploitation in the next 30 days. InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
• CVE-2021-45055, published 2022-01-13. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An…
• CVE-2022-30651, published 2022-06-16. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an…
• CVE-2021-45056, published 2022-01-13. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
• CVE-2021-45053, published 2022-01-13. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…

Latest

• CVE-2026-34708, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
• CVE-2026-34707, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
• CVE-2026-34706, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
• CVE-2026-34631, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
• CVE-2026-27287, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.…
• CVE-2026-21281, published 2026-01-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
• CVE-2025-61818, published 2025-11-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
• CVE-2025-61817, published 2025-11-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
• CVE-2025-61816, published 2025-11-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
• CVE-2025-54223, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. InCopy versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…